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REMARKS 

Reconsideration of this application based on the foregoing Amendment and 
the following Remarks is respectfully requested. 

At the outset, prior to addressing the merits of the issues raised in the Office 
Action, the applicants call to the Examiner's attention that in order to enhance the 
recitation of the limitations of the present invention, Claim 1 has been amended to 
recite the limitation of — wherein user authentication occurs on the token.-- In 
addition, the limitations of the claim have been amended to emphasize the memory 
and the processor that are specific to the token. 

Similarly, Claim 1 8 has been amended also to enhance the recitation of the 
limitations of the present invention to add the limitation—authenticating a user identity 
in the token--. Claim 35 has been amended similarly to add the limitation 
—authenticating, in the token, a user identity—. Also, the limitations of the claim have 
been amended to emphasize the processor that is specific to the token. Claim 49 has 
been amended also to add the limitation —the user input device for authenticating by 
the token the personal identification private to the user—, and also to emphasize the 
memory and the processor that are specific to the token. 

The Applicants have amended Claims 19, 28, 76, 84 and 86 to correct obvious 
minor typographical errors in those claims. No new matter has been added. 

On page 2 of the Office Action, paragraph 1 , the Examiner indicates that 
Claim 53 depends from a canceled claim 48 and the Examiner requires correction. In 
response to the objection to Claim 53, the Applicants have amended Claim 53 to 
change the dependency from canceled Claim 48 to Claim 49. Therefore, the 
Applicants respectfully request that the Examiner withdraw the objection to Claim 53. 
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Claim 54 has been amended also to add the limitation —authenticating in the 
token the user input comprising a personal identification via an input device— and 
also to emphasize the processor that is specific to the token. 

The probable allowance of Claims 51-53 and 58-60 is acknowledged and 
gratefully appreciated. These claims have only been objected to based on their 
dependency on rejected base claims. On Page 9 of the Office Action, paragraph 3 1 , 
with regard to Claim 49, the Examiner states that the Applicant is advised to 
incorporate the limitations in Claim 49 with Claims 50-53, 54 with Claims 56-60. 
The Applicants have interpreted this statement to mean that Claims 51 and 58 are 
objected to as being dependent upon a rejected base claim but would be allowable if 
rewritten into independent form including all of the limitations of the base claims and 
any intervening claims. 

As a result, the Applicants have rewritten Claims 51 and 58 into independent 
form including all of the limitations of the base claims and any intervening claims. 
Specifically, Claim 51 has been amended to incorporate the limitations of base Claim 
49, prior to the current amendment, and of intervening Claim 50. Similarly, Claim 58 
has been amended to incorporate the limitations of base Claim 54, prior to the current 
amendment, and of intervening Claim 57. 

Therefore, in that claims 51 and 58 have been rewritten into independent form, 
the Applicants respectfully request that the Examiner withdraw the objections to 
Claims 51-53 and 58-60 as being dependent upon a rejected base claim. It is 
respectfully urged that Claims 51-53 and 58-60 are now in proper form for allowance 
and such action is respectfully solicted. 

Claim 61 has been amended similarly to Claims 49 and 54 to recite the 
limitation —wherein the token authenticates user identity—. Similarly, Claim 71 has 
been amended to recite the limitation —authenticating a user identity in the token—. 
Claims 77 and 80 have been amended recite the limitation— the token processor 
authenticating a user identity—. Claim 86 has been amended to recite the limitation of 
—authenticating in the token a user identity—. Claims 71, 77, 80 and 86 have also 
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been amended to emphasize also the processor or the memory that is specific to the 
token, as appropriate. 

Support for the amendment to Claims 1, 18, 35, 49, 54, 61, 71, 77, 80 and 86 
is found in the specification on page 21, in Table 3, line 4, wherein it is disclosed with 
respect to the attribute PIN that access is granted if and only if the proper PIN has 
been supplied to the personal key 200, and PIN verification is successful (user 
authentication). Page 39, lines 20-21, disclose that the present invention describes a 
compact, self-contained personal token. Also on page 39, lines 25-27, it is disclosed 
that the personal key also comprises an integral user input device and an integral user 
output device. Consequently, the term personal key and personal token are used 
interchangeably, in a manner obvious to one of ordinary skill in the art at the time the 
invention was made. As a result, no new matter has been added by the amendments 
to Claims 1, 18, 35, 49, 54, 61, 71, 77, 80 and 86. 

With respect to the rejections over the prior art, the Examiner has rejected 
Claims 1-2, 4-6, 18, 35, 38-40, 49-50, 54, 56-57, 61-62, 65-66, 71, 73, and 86 under 
35 U.S.C. 102(e) as being anticipated by Rallis et al., U.S. Patent No. 6,425,084, 
issued July 23, 2002. 

The Examiner has rejected Claims 7-10, 12-15, 19-26, 28-31, 34, 36-37, 41, 
43-46, 63-64, 67-69, 72, 74-77, 80-83 85, 87, and 89 under 35 U.S.C. 103(a) as being 
unpatentable over Rallis et al. in view of the Kobelius publication. 

In response to the foregoing rejections, the Applicants maintain that neither 
Rallis nor Kobelius, taken alone or in combination, disclose, teach or suggest the 
limitations of now more specifically amended independent Claims 1,18,35, 49, 54, 
61, 71, 77, 80 and 86 of an apparatus comprising a compact personal token wherein 
user data are stored in the token memory, the token processor authenticates a user 
identity or a method comprising a step of authenticating a user identity in the token , as 
generally recited by amended Claims 1, 18, 35, 49, 54, 61, 71, 77, 80 and 86, as 
appropriate. 
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Rather, the Rallis et al. patent discloses in column 3, lines 4-16, with respect to 
FIG. 2, that the Central Processing Unit (CPU) 50 includes a boot-up procedure 
wherein a user-validation program resides in a ROM adapter 34 of the BIOS 30 and is 
executed at boot-up and prior to the download of the operating system. Therefore, the 
user validation program resides in the host computer 10 and not the key device 20. 

Similarly, in the Kobelius reference article, it is disclosed on page 1, lines 31- 
38 of the text portion, that: "When you initiate a network logon with your user 
identification and password, you receive a numeric string. If you have a handheld 
hardware token device, you type in that string and your personal identification 
number (PIN). The token uses a secret algorithm and key to produce what is 
essentially a onetime, nonrepeatable session password, and then displays it on an LCD 
* screen. You enter that session password on your computer, and if it matches the 
authentication server's expectation , you're granted access. . ..'\ Therefore, Kobelius 
discloses that it is the server and not the token where authentication occurs. 

Consequently, neither the Rallis et al. patent nor the Kobelius article discloses, 
teaches or suggests the limitations of now amended independent Claims 1,18, 35, 49, 
54, 61, 71, 77, 80 and 86 of an apparatus comprising a compact personal token 
wherein user data are stored in the token memory, the token processor authenticates a 
user identity or a method comprising a step of authenticating a user identity in the 
token. 

As a result, the Applicants respectfully request the Examiner to reconsider the 
claims in view of the new limitations added to the claims, and to withdraw the 
rejections of Claims 1-2, 4-6, 18, 35, 38-40, 49-50, 54, 56-57, 61-62, 65-66, 71, 73, 
and 86 under 35 U.S.C. 102(e) as being anticipated by Rallis et al. 

Similarly, the Applicants respectfully request the Examiner to reconsider the 
claims in view of the new limitations added to the claims, and to withdraw the 
rejections of Claims 7-10, 12-15, 19-26, 28-31, 34, 36-37, 41, 43-46, 63-64, 67-69, 
72, 74-77, 80-83 85, 87, and 89 under 35 U.S.C. 103(a) as being unpatentable over 
Rallis et al in view of Kobelius. 
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It is respectfully urged that the foregoing Amendment and Remarks establish 
the patentable nature of all of the claims remaining in the application, i.e., Claims 1, 
2, 4-15, 18-31, 34-46, 49-54, 56-57, 80-87 and 89. No new matter has been added. 
Wherefore, early and favorable reconsideration and issuance of a Notice of Allowance 
are respectfully requested. 
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